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What is claimed is: 

1 1 . In an apparatus, a method of operation comprising: 

2 generating in real time a first deciphering round key based on a deciphering 

3 key; 

4 incrementally deciphering a ciphered text for a first round using the real time 

5 generated first deciphering round key; 

6 generating in real time a second deciphering round key based on said 

7 generated first deciphering round key while said incremental deciphering for a first 

8 round is being performed; and 

9 incrementally deciphering the partially deciphered text for a second round 
10 using the real time generated second deciphering round key. 

1 2. The method of claim 1 , wherein said first and second deciphering round keys 

2 comprise first and second plurality of round key data words respectively, and said 

3 generation in real time of said second deciphering round keys comprises iteratively 

4 generating said second plurality of round key data words over a plurality of 

5 iterations. 

1 3. The method of claim 2, wherein said iterative generation of said second 

2 plurality of round key data words over a plurality of iterations comprises generating 

3 one of said second plurality round key data words each iteration, including 

4 performance of a first XOR operation on a first and a second round key data word 

5 during each iteration. 
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1 4. The method of claim 3, wherein said first round key data word employed in 

2 said first XOR operation during each iteration is a first predecessor round key data 

3 word of one deciphering master key length preceding the round key data word to be 

4 generated, and said second round key data word employed is a conditionally 

5 transformed second predecessor round key data word immediately following the first 

6 predecessor round key data word. 

1 5. The method of claim 4, wherein said second round key data word employed 

2 is an untransformed version of said second predecessor round key data word. 

1 6. The method of claim 4, wherein said second round key data word employed 

2 is a substitution value looked up from a substitution box using an inverse of said 

3 second predecessor round key data word. 

1 7. The method of claim 4, wherein said second round key data word employed 

2 is a thrice transformed version of said second predecessor round key data word 

3 generated by performing a second XOR operation on a twice transformed version of 

4 said second predecessor round key data word and a value that is functional 

5 dependent on an iteration index value. 

1 8. The method of claim 7, wherein said twice transformed version of said 

2 second predecessor round key data word is a value looked up from a substitution 

3 box using an inverse of an once transformed version of said second predecessor 

4 round key data word. 

1 9. The method of claim 8, wherein for said once transformed version of said 

2 second predecessor round key data word is generated by rotationally shifting said 
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3 second predecessor round key data word in a predetermined shifting direction for a 

4 predetermined shifting amount. 

1 10. An apparatus comprising: 

2 a deciphering round key generator to successively generate in real time at 

3 least a first and a second deciphering round key based on a deciphering key; and 

4 a deciphering unit coupled to the deciphering round key generator to 

5 successively employ said real time successively generated deciphering round keys 

6 to incrementally decipher a ciphered text; 

7 wherein said deciphering round key generator at least generates said second 

8 deciphering round key in real time while said deciphering unit deciphers said 

9 ciphered text employing said real time generated first deciphering round key. 

1 11. The apparatus of claim 10, wherein said first and second deciphering round 

2 keys comprise first and second plurality of round key data words respectively, and 

3 said deciphering round key generator generates said second deciphering round 

4 keys in real time by iteratively generating said second plurality of round key data 

5 words over a plurality of iterations. 

1 12. The apparatus of claim 1 1 , wherein said deciphering round key generator 

2 comprises a first XOR function, and iteratively generates said second plurality of 

3 round key data words over a plurality of iterations by generating one of said second 

4 plurality round key data words each iteration, performing an XOR operation on a first 

5 and a second round key data word using said first XOR function. 

1 13. The apparatus of claim 12, wherein said first round key data word employed 

2 in each iteration is a first predecessor round key data word of one deciphering 
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3 master key length preceding the round key data word to be generated, and said 

4 second round key data word is a conditionally transformed second predecessor 

5 round key data word immediately following said first predecessor round key data 

6 word. 

1 14. The apparatus of claim 13, wherein said deciphering round key generator 

2 further comprises conditional passthru circuitry and transformation circuitry coupled 

3 to said first XOR function in parallel to provide said XOR function with an 

4 untransformed version or an one or more times transformed version of said 

5 predecessor round key data word depending on at least multiplicity between an 

6 iteration index value and a deciphering master key length. 

1 1 5. The apparatus of claim 14, wherein said deciphering round key generator 

2 further comprises a substitution box and an inverse lookup circuitry serially coupled 

3 to said passthru circuitry to substitute the second predecessor round key data word 

4 with a substitute value looked up using an inverse of said second predecessor 

5 round key data word. 

1 16. The apparatus of claim 14, wherein said deciphering round key generator 

2 further comprises a second XOR function coupled to said passthru circuitry to 

3 perform a second XOR operation on an at least once transformed version of said 

4 second predecessor round key data word and a value that is functionally dependent 

5 on an iteration index value. 

1 17. The apparatus of claim 16, wherein said deciphering round key generator 

2 further comprises a lookup table coupled to said second XOR function and having 
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3 stored therein said functional dependent values to be looked up using a value that 

4 depends on a deciphering master key length and an amount of iteration performed. 

1 18. The apparatus of claim 16, wherein said deciphering round key generator 

2 further comprises a substitution box and inverse lookup circuitry serially coupled to 

3 said second XOR function to provide the second XOR function with said at least 

4 once transformed version of said second predecessor round key data word, 

5 generated by substituting an inverse of an least once transformed version of said 

6 second predecessor round key data word with a substitute value. 

1 19. The apparatus of claim 18, wherein said deciphering round key generator 

2 further comprises a rotational shifter coupled to said inverse lookup circuitry to 

3 provide said inverse lookup circuitry with said at least once transformed version of 

4 said second predecessor round key data word, generated by rotationally shifting the 

5 said second predecessor round key data word . 

1 20. The apparatus of claim 10, wherein said apparatus is disposed on an 

2 integrated circuit. 

1 21 . A routing apparatus comprising: 

2 a first deciphering round key generator to successively generate in real time 

3 at least a first and a second deciphering round key based on a first deciphering key 

4 for a first network traffic flow; 

5 a first deciphering unit coupled to the first deciphering round key generator to 

6 successively employ said real time successively generated at least first and second 

7 deciphering round keys to incrementally decipher a first ciphered text for the first 

8 network traffic flow; 
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9 a second deciphering round key generator to successively generate in real 

10 time at least a third and a fourth deciphering round key based on a second 

1 1 deciphering key for a second network traffic flow; and 

12 a second deciphering unit coupled to the second deciphering round key 

13 generator to successively employ said real time successively generated at least 

14 third and fourth deciphering round keys to incrementally decipher a second ciphered 

15 text for the second network traffic flow; 

16 wherein said first deciphering round key generator at least generates said 

17 second deciphering round key in real time while said first deciphering unit deciphers 

18 said first ciphered text employing said real time generated first deciphering round 

19 key, and said second deciphering round key generator at least generates said fourth 

20 deciphering round key in real time while said second deciphering unit deciphers said 

21 second ciphered text employing said real time generated third deciphering round 

22 key. 

1 22. The routing apparatus of claim 21 , wherein said first, second, third and fourth 

2 deciphering round keys comprise first, second, third and fourth plurality of round key 

3 data words respectively, and said first and second deciphering round key generator 

4 generate said second and fourth deciphering round keys in real time by iteratively 

5 generate said second and fourth plurality of round key data words over a first and a 

6 second plurality of iterations respectively. 

1 23. The routing apparatus of claim 22, wherein each of said first/second 

2 deciphering round key generator comprises a first XOR function, and iteratively 

3 generates said second/fourth plurality of round key data words over a plurality of 

4 iterations respectively by generating one of said second/fourth plurality round key 
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5 data words each iteration, performing an XOR operation on a first and a second 

6 round key data word using said first XOR function. 

1 24. The routing apparatus of claim 23, wherein said first round key data word 

2 employed in each iteration is a first predecessor round key data word of said 

3 second/fourth plurality of round key data words of one deciphering master key 

4 length preceding the round key data word to be generated, and said second round 

5 key data word employed is a conditionally transformed second predecessor round 

6 key data word immediately following the first predecessor round key data word. 

1 25. The routing apparatus of claim 23, wherein each of said first/second 

2 deciphering round key generator further comprises conditional passthru circuitry and 

3 transformation circuitry coupled to said first XOR function in parallel to provide said 

4 XOR function with an untransformed version or an one ore more times transformed 

5 version of said second predecessor round key data word depending on at least 

6 multiplicity between an iteration index value and a deciphering master key length. 

1 26. The routing apparatus of claim 25, wherein each of said first/second 

2 deciphering round key generator further comprises a substitution box and an inverse 

3 lookup circuitry serially coupled to said passthru circuitry to substitute the second 

4 predecessor round key data word with a substitute value looked up using an inverse 

5 of said second predecessor round key data word. 

1 27. The routing apparatus of claim 25, wherein each of said first/second 

2 deciphering round key generator further comprises a second XOR function coupled 

3 to said passthru circuitry to perform a second XOR operation on an at least once 
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4 transformed version of said second predecessor round key data word and a value 

5 that is functionally dependent on an iteration index value. 

1 28. The routing apparatus of claim 27, wherein each of said first/second 

2 deciphering round key generator further comprises a lookup table coupled to said 

3 second XOR function and having stored therein said functional dependent values to 

4 be looked up using a value that depends on a deciphering master key length and an 

5 amount of iteration performed. 

1 29. The routing apparatus of claim 27, wherein each of said first/second 

2 deciphering round key generator further comprises a substitution box and inverse 

3 lookup circuitry serially coupled to said second XOR function to provide the second 

4 XOR function with said at least once transformed version of said second 

5 predecessor round key data word, generated by substituting an inverse of an at 

6 least once transformed version of said second predecessor round key data word 

7 with a substitute value. 

1 30. The routing apparatus of claim 29, wherein each of said first/second 

2 deciphering round key generator further comprises a rotational shifter coupled to 

3 said inverse lookup circuitry to provide said inverse lookup circuitry with said at least 

4 once transformed version of said second predecessor round key data word, 

5 generated by rotationally shifting said second predecessor round key data word. 

1 31 . The routing apparatus of claim 21 , wherein said routing apparatus is 

2 disposed on an integrated circuit. 
1 
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